Network Intrusion Detection System Vulnerability in Suricata by Open Information Security Foundation

CVE-2026-46352

What is CVE-2026-46352?

The Suricata network security engine is susceptible to a deadlock scenario in its IP defragmentation code. This occurs when processing fragmented traffic that contains an encapsulated tunnel protocol, where the payload itself is also fragmented. Users of Suricata versions 8.0.0 through 8.0.4 are at risk, as the software may become unresponsive under these conditions. A fix is implemented in version 8.0.5, and there are currently no known workarounds available for this issue. It is crucial for users to upgrade to the latest version to ensure network stability and security.

References